$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: urAFqmQzwfpMFqjGAv3SWdNDJ2Gae71v/SLg6lTyLiU= Subject key identifier: D4:B0:EC:AB:35:66:0A:5D:92:CE:68:32:25:55:F1:53:62:29:54:DB Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 0199FB0ED659C17A0499DA14C3F403CE22DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1700 Signing time: Sun 19 Oct 2025 06:01:17 +0000 Manifest this update: Sun 19 Oct 2025 06:01:17 +0000 Manifest next update: Mon 20 Oct 2025 06:01:17 +0000 Files and hashes: 1: 1F-PLkJeZsd5BhbWomZg7cLPFrk.roa (hash: yrygGJcoXqVH2Jg8Juj5GnPuSpfNJREHSoSijlooIac=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: kckxQD/SRfIVwSuCkqfXdrvdX6zEsdadFQr94vyVyCw=) 3: 28-uwfDVLpaahAp5_g4gOqonJRE.roa (hash: ZiFvqyNcFNQjj1MRiXrgYLhWSDf2EOuub9eyPgFwZ5w=) 4: 3PFyhkeygxSnr9lo2JsKv8zzptA.roa (hash: q1R0erCPFvF5C0+eg74kijSUxdckHy4082+SsXMgLoI=) 5: 5gCvrLecynoNlZqqecgbQQFoRrQ.roa (hash: 9K+m38Q0PxPs98dlo8mOUJqX2gTHhK0yh4taoKPklF4=) 6: Hgi1HuyOIm-pDNTXBi7SDeMMv54.roa (hash: 4I6w4WrI+TeCpJfBFE/CPemODRHx6exn+BxP4Gc/fZ4=) 7: VTFmKW5oJe_aki7x1urblkP0Fyc.roa (hash: 2MZuFdP6pQLocFIUqAzsdUT8olNA1CbFEwyUxslWUHU=) 8: WuMjl-VoG-q9mOfKlozyoU3i5Zc.roa (hash: gMQYLpr2E7Od3N3zIX37zoUdKHUCId0XHkWxbn/9Hs4=) 9: Y-ggvECpJ-TUj9BMaNxFVHCG_mk.roa (hash: yHJbvycQTABXHTmwKw5e8PRSEFVUISxjCDtnqSPXNps=) 10: czt3GQhHtSmOo6RJuvFMFQAKSGo.roa (hash: XJWzfiETobcimR26X1Pa8klzjoq9ZGkjfUnqI+42fs0=) 11: eL6yX2gKmuR54LoAuIUZEONKX3g.roa (hash: Wq/KgDr2vwlpid8VQStYJgjmPQjXNNh76BSl9DIrTcE=) 12: hBf-hoIhETw06OBRpv7F1WdTrE8.roa (hash: LSEM+beBKj2xu4gyMsUhzku59BFOyI6BOdyKq1jM8vA=) 13: ps-3dIi4E3kjzYMhNLY6gSZjzEI.roa (hash: AimvrgTPnFzv1TtjV/eH/9wijMpIF0IeujrL4F6J9qw=) 14: vWlItCBxAXeKE8gJX96SzwOKVyc.roa (hash: Y2Q+VHBMvY4aKyxjSWnm9nXu79hw6C2astvb5J8gRi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 Oct 2025 06:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:99:fb:0e:d6:59:c1:7a:04:99:da:14:c3:f4:03:ce:22:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Oct 19 06:01:17 2025 GMT Not After : Oct 20 06:01:17 2025 GMT Subject: CN=d4b0ecab35660a5d92ce68322555f153622954db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1a:0a:50:46:f2:69:e5:e3:82:57:8a:d6:ce: 51:e0:9e:65:df:5d:82:29:a0:f9:68:95:d2:54:f3: 37:fa:c2:05:97:2b:f5:9d:23:3d:a6:66:35:50:1d: 43:89:ac:5b:17:3a:25:b6:1a:63:af:8a:43:c2:66: c6:1b:d7:18:11:34:1c:3d:b3:74:93:07:66:8a:07: 54:ef:2c:1e:c0:a1:54:eb:fd:0e:c2:c4:93:0b:ca: d3:92:e7:04:d6:23:47:e5:09:1d:8f:fe:18:ca:85: 13:8d:56:cb:28:0f:ad:e1:bd:fa:30:ad:68:26:a3: 14:79:22:a3:8d:e6:80:c5:ed:8c:9f:5b:66:0d:79: fd:6e:04:c5:23:6a:b7:3b:69:fa:e1:84:2f:8e:77: 59:5c:77:91:b1:f1:61:d8:71:55:1a:91:7c:2a:c1: e6:82:72:d8:0b:f1:6b:71:93:a8:65:8f:74:4a:19: 66:d0:7a:e0:cc:62:92:9d:06:7a:16:4b:88:c4:88: a5:50:40:06:1e:d1:59:32:55:58:fe:07:59:92:5b: dc:59:c1:76:20:ab:ed:52:05:e4:7f:b2:ad:38:7b: 33:30:5c:aa:36:1b:56:54:1e:13:11:3e:c8:8f:fe: 57:81:cc:9b:1c:27:fe:95:5c:61:d8:53:40:4b:6b: 5e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B0:EC:AB:35:66:0A:5D:92:CE:68:32:25:55:F1:53:62:29:54:DB X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e0:d5:aa:12:b1:80:82:3d:ff:9d:70:04:59:9f:ef:d8:9e: 5a:30:61:dd:23:67:a0:90:9b:5c:40:68:d8:a9:72:11:89:b2: 4c:6d:f8:84:f3:6e:69:77:2d:2b:2b:8b:c4:58:d4:37:f4:d2: 76:db:4f:f8:c5:7d:87:b8:e0:58:98:46:c1:3e:08:59:52:c4: 51:66:9f:5a:00:d0:ba:24:18:d8:11:ab:df:bd:da:e2:fb:fe: 06:5f:4d:ee:f5:2c:38:18:36:74:79:00:7b:02:56:1a:9c:61: e0:34:c9:f3:3d:ba:27:af:48:41:fb:27:f9:63:58:1c:2a:fe: 29:47:d2:90:33:1e:82:19:7a:c3:da:cf:74:71:04:18:c7:73: 45:27:a3:be:3c:76:ef:cb:e6:6f:1a:5d:41:b4:37:b2:5a:b1: bc:54:08:77:cb:0d:ac:b4:e0:44:fd:79:12:6e:c2:ae:fd:7c: f4:d7:53:32:30:09:d2:78:81:b1:aa:58:06:e7:15:04:47:38: c4:4e:87:db:90:7a:93:66:d9:3b:08:b3:24:46:d7:37:f7:d1: e7:f6:86:2a:22:56:7f:5b:ea:94:1f:8c:4a:dc:3d:87:5d:f8: 86:8f:3e:43:f5:4f:b3:a5:cf:77:81:9f:2c:22:f7:a0:c2:13: cf:97:e5:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZn7DtZZwXoEmdoUw/QDziLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjUxMDE5MDYwMTE3WhcNMjUxMDIwMDYwMTE3WjAzMTEwLwYDVQQD EyhkNGIwZWNhYjM1NjYwYTVkOTJjZTY4MzIyNTU1ZjE1MzYyMjk1NGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hoKUEbyaeXjgleK1s5R4J5l312C KaD5aJXSVPM3+sIFlyv1nSM9pmY1UB1DiaxbFzolthpjr4pDwmbGG9cYETQcPbN0 kwdmigdU7ywewKFU6/0OwsSTC8rTkucE1iNH5Qkdj/4YyoUTjVbLKA+t4b36MK1o JqMUeSKjjeaAxe2Mn1tmDXn9bgTFI2q3O2n64YQvjndZXHeRsfFh2HFVGpF8KsHm gnLYC/FrcZOoZY90Shlm0HrgzGKSnQZ6FkuIxIilUEAGHtFZMlVY/gdZklvcWcF2 IKvtUgXkf7KtOHszMFyqNhtWVB4TET7Ij/5XgcybHCf+lVxh2FNAS2tedwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNSw7Ks1Zgpdks5oMiVV8VNiKVTbMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANeDVqhKx gII9/51wBFmf79ieWjBh3SNnoJCbXEBo2KlyEYmyTG34hPNuaXctKyuLxFjUN/TS dttP+MV9h7jgWJhGwT4IWVLEUWafWgDQuiQY2BGr373a4vv+Bl9N7vUsOBg2dHkA ewJWGpxh4DTJ8z26J69IQfsn+WNYHCr+KUfSkDMeghl6w9rPdHEEGMdzRSejvjx2 78vmbxpdQbQ3slqxvFQId8sNrLTgRP15Em7Crv189NdTMjAJ0niBsapYBucVBEc4 xE6H25B6k2bZOwizJEbXN/fR5/aGKiJWf1vqlB+MStw9h134ho8+Q/VPs6XPd4Gf LCL3oMITz5flYQ== -----END CERTIFICATE-----Generated at Sun Oct 19 13:05:53 2025 by rpki-client